CVE-2026-78021

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to a Generation of Error Message Containing Sensitive Information (CWE-209). An unauthenticated attacker with remote access can exploit this flaw to cause information disclosure and information exposur...

EUVD-2026-95570

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote...

CVE-2026-78020

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...

CVE-2026-78020

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote...

CVE-2026-78019

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Inclusion of Functionality from Untrusted Control Sphere (CWE-829). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges , Filesystem access , and ...

EUVD-2026-95569

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...

CVE-2026-78019

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...

CVE-2026-78019

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...

-CVE-2021-44790

CVE-2021-44790 Description of CVE-2021-44790 CVE-2021-44790 describes a system-level security vulnerability in the modlua of the Apache HTTP Server, specifically in version 2.4.51 and earlier versions. This vulnerability is triggered when the r:parsebody function improperly handles HTTP...

CVE-2026-106491

A flaw was found in the Backstage plugin-proxy-backend component. An authenticated remote attacker can exploit improper input validation by submitting a specially crafted request URL to the proxy backend. This causes the proxy service to forward requests to endpoints outside the configured base...

EUVD-2026-95567

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection...

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...

EUVD-2026-95566

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure and Information...

CVE-2026-78016

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this flaw to cause Information exposure and Information tampering . No specific...

POC-WP-XSS2Shell-CVE-2026-64638

XSS2Shell — PoC for CVE-2026-64638 Educational Proof of Concept for the XSS2Shell chain CVE-2026-64638, a pre-authentication XSS → RCE vulnerability in WordPress Core discovered independently by pwn.ai and disclosed on August 7, 2026. Table of contents 1. Executive Summary 2. Legal notice 3. Chai...

EUVD-2026-95565

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-78015

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , is affected by a Use of Less Trusted Source vulnerability (CWE-348). An unauthenticated attacker with remote access could potentially exploit this flaw to cause information tampering . No specific exploit details or ...

CVE-2026-78015

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

Security Bulletin: A heap buffer overflow vulnerability in rsyslog impacts AIX.

Summary Vulnerabilities in Rsyslog could cause heap buffer overflow CVE-2026-78002. Rsyslog is used by AIX as logging daemon. Vulnerability Details CVEID:CVE-2026-78002 DESCRIPTION: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the...

CVE-2026-76779

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Improper Restriction of Excessive Authentication Attempts (CWE-307). An unauthenticated attacker with remote access can exploit this flaw to bypass protection mechanisms, achieve Elevation of privil...